From owner-freebsd-questions@FreeBSD.ORG  Fri Apr 25 16:30:14 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A60961065672
	for <freebsd-questions@freebsd.org>;
	Fri, 25 Apr 2008 16:30:14 +0000 (UTC) (envelope-from cswiger@mac.com)
Received: from mail-out4.apple.com (mail-out4.apple.com [17.254.13.23])
	by mx1.freebsd.org (Postfix) with ESMTP id 78E6A8FC14
	for <freebsd-questions@freebsd.org>;
	Fri, 25 Apr 2008 16:30:14 +0000 (UTC) (envelope-from cswiger@mac.com)
Received: from relay13.apple.com (relay13.apple.com [17.128.113.29])
	by mail-out4.apple.com (Postfix) with ESMTP id DC62A2AFE86B;
	Fri, 25 Apr 2008 09:30:13 -0700 (PDT)
Received: from relay13.apple.com (unknown [127.0.0.1])
	by relay13.apple.com (Symantec Mail Security) with ESMTP id C695B28050; 
	Fri, 25 Apr 2008 09:30:13 -0700 (PDT)
X-AuditID: 1180711d-aa394bb000000ed7-61-481207153623
Received: from cswiger1.apple.com (cswiger1.apple.com [17.214.13.96])
	by relay13.apple.com (Apple SCV relay) with ESMTP id AEF7B2804F;
	Fri, 25 Apr 2008 09:30:13 -0700 (PDT)
Message-Id: <BCBF8C55-3A54-4DA7-AC76-32A217EFB4FB@mac.com>
From: Chuck Swiger <cswiger@mac.com>
To: Geert Geurts <begeert@gmail.com>
In-Reply-To: <1209131161.14700.4.camel@puk>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v919.2)
Date: Fri, 25 Apr 2008 09:30:13 -0700
References: <1209131161.14700.4.camel@puk>
X-Mailer: Apple Mail (2.919.2)
X-Brightmail-Tracker: AAAAAA==
Cc: freebsd-questions@freebsd.org
Subject: Re: restrict ssh access
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2008 16:30:14 -0000

On Apr 25, 2008, at 6:46 AM, Geert Geurts wrote:
> I've got a server running a ssh server, I want to enable ssh for the  
> use
> of sftp by a group of users, and limit their ssh access to just allow
> running passwd so they can change their default password. What  
> whould be
> the best/easiest way to acomplish this, or something similiar?

I wonder what would happen if you gave them a shell of "/usr/bin/ 
passwd"...?  :-)

-- 
-Chuck